nginx-tests: stream_ssl_certificate.t annotate

annotate stream_ssl_certificate.t @ 1860:58951cf933e1

Tests: added has_feature() test for SSL libraries. This makes it possible to further simplify various SSL tests. It also avoids direct testing of the $t->{_configure_args} internal field, and implements proper comparison of version numbers.

author	Maxim Dounin <mdounin@mdounin.ru>
date	Thu, 18 May 2023 18:07:06 +0300
parents	0351dee227a8
children	dbb7561a9441

rev	line source
1443 7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	1 #!/usr/bin/perl
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	2
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	3 # (C) Sergey Kandaurov
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	4 # (C) Nginx, Inc.
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	5
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	6 # Tests for stream ssl module with dynamic certificates.
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	7
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	8 ###############################################################################
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	9
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	10 use warnings;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	11 use strict;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	12
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	13 use Test::More;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	14
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	15 BEGIN { use FindBin; chdir($FindBin::Bin); }
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	16
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	17 use lib 'lib';
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	18 use Test::Nginx;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	19
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	20 ###############################################################################
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	21
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	22 select STDERR; $\| = 1;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	23 select STDOUT; $\| = 1;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	24
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	25 eval {
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	26 require Net::SSLeay;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	27 Net::SSLeay::load_error_strings();
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	28 Net::SSLeay::SSLeay_add_ssl_algorithms();
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	29 Net::SSLeay::randomize();
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	30 };
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	31 plan(skip_all => 'Net::SSLeay not installed') if $@;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	32
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	33 eval {
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	34 my $ctx = Net::SSLeay::CTX_new() or die;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	35 my $ssl = Net::SSLeay::new($ctx) or die;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	36 Net::SSLeay::set_tlsext_host_name($ssl, 'example.org') == 1 or die;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	37 };
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	38 plan(skip_all => 'Net::SSLeay with OpenSSL SNI support required') if $@;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	39
1860 58951cf933e1 Tests: added has_feature() test for SSL libraries. Maxim Dounin <mdounin@mdounin.ru> parents: 1851 diff changeset	40 my $t = Test::Nginx->new()
58951cf933e1 Tests: added has_feature() test for SSL libraries. Maxim Dounin <mdounin@mdounin.ru> parents: 1851 diff changeset	41 ->has(qw/stream stream_ssl stream_geo stream_return openssl:1.0.2/)
58951cf933e1 Tests: added has_feature() test for SSL libraries. Maxim Dounin <mdounin@mdounin.ru> parents: 1851 diff changeset	42 ->has_daemon('openssl')
58951cf933e1 Tests: added has_feature() test for SSL libraries. Maxim Dounin <mdounin@mdounin.ru> parents: 1851 diff changeset	43 ->write_file_expand('nginx.conf', <<'EOF');
1443 7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	44
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	45 %%TEST_GLOBALS%%
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	46
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	47 daemon off;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	48
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	49 events {
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	50 }
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	51
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	52 stream {
1609 f3ba4c74de31 Tests: added TEST_GLOBALS_STREAM variable support. Andrei Belov <defan@nginx.com> parents: 1535 diff changeset	53 %%TEST_GLOBALS_STREAM%%
f3ba4c74de31 Tests: added TEST_GLOBALS_STREAM variable support. Andrei Belov <defan@nginx.com> parents: 1535 diff changeset	54
1443 7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	55 geo $one {
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	56 default one;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	57 }
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	58
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	59 geo $two {
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	60 default two;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	61 }
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	62
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	63 geo $pass {
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	64 default pass;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	65 }
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	66
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	67 ssl_session_cache shared:SSL:1m;
1836 74cffa9d4c43 Tests: enabled session reuse via TLS session tickets. Maxim Dounin <mdounin@mdounin.ru> parents: 1637 diff changeset	68 ssl_session_tickets on;
1443 7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	69
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	70 server {
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	71 listen 127.0.0.1:8080 ssl;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	72 return $ssl_server_name:$ssl_session_reused;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	73
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	74 ssl_certificate $one.crt;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	75 ssl_certificate_key $one.key;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	76 }
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	77
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	78 server {
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	79 listen 127.0.0.1:8083 ssl;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	80 return $ssl_server_name:$ssl_session_reused;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	81
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	82 # found in key
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	83 ssl_certificate pass.crt;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	84 ssl_certificate_key $pass.key;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	85 ssl_password_file password_file;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	86 }
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	87
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	88 server {
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	89 listen 127.0.0.1:8081 ssl;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	90 return $ssl_server_name:$ssl_session_reused;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	91
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	92 ssl_certificate $one.crt;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	93 ssl_certificate_key $one.key;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	94 }
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	95
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	96 server {
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	97 listen 127.0.0.1:8082 ssl;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	98 return $ssl_server_name:$ssl_session_reused;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	99
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	100 ssl_certificate $two.crt;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	101 ssl_certificate_key $two.key;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	102 }
1445 889283abadf8 Tests: added basic ssl tests with dynamic certificate not found. Sergey Kandaurov <pluknet@nginx.com> parents: 1443 diff changeset	103
889283abadf8 Tests: added basic ssl tests with dynamic certificate not found. Sergey Kandaurov <pluknet@nginx.com> parents: 1443 diff changeset	104 server {
889283abadf8 Tests: added basic ssl tests with dynamic certificate not found. Sergey Kandaurov <pluknet@nginx.com> parents: 1443 diff changeset	105 listen 127.0.0.1:8084 ssl;
889283abadf8 Tests: added basic ssl tests with dynamic certificate not found. Sergey Kandaurov <pluknet@nginx.com> parents: 1443 diff changeset	106 return $ssl_server_name:$ssl_session_reused;
889283abadf8 Tests: added basic ssl tests with dynamic certificate not found. Sergey Kandaurov <pluknet@nginx.com> parents: 1443 diff changeset	107
889283abadf8 Tests: added basic ssl tests with dynamic certificate not found. Sergey Kandaurov <pluknet@nginx.com> parents: 1443 diff changeset	108 ssl_certificate $ssl_server_name.crt;
889283abadf8 Tests: added basic ssl tests with dynamic certificate not found. Sergey Kandaurov <pluknet@nginx.com> parents: 1443 diff changeset	109 ssl_certificate_key $ssl_server_name.key;
889283abadf8 Tests: added basic ssl tests with dynamic certificate not found. Sergey Kandaurov <pluknet@nginx.com> parents: 1443 diff changeset	110 }
1443 7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	111 }
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	112
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	113 EOF
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	114
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	115 $t->write_file('openssl.conf', <<EOF);
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	116 [ req ]
1488 dbce8fb5f5f8 Tests: align with OpenSSL security level 2. Sergey Kandaurov <pluknet@nginx.com> parents: 1445 diff changeset	117 default_bits = 2048
1443 7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	118 encrypt_key = no
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	119 distinguished_name = req_distinguished_name
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	120 [ req_distinguished_name ]
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	121 EOF
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	122
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	123 my $d = $t->testdir();
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	124
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	125 foreach my $name ('one', 'two') {
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	126 system('openssl req -x509 -new '
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	127 . "-config $d/openssl.conf -subj /CN=$name/ "
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	128 . "-out $d/$name.crt -keyout $d/$name.key "
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	129 . ">>$d/openssl.out 2>&1") == 0
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	130 or die "Can't create certificate for $name: $!\n";
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	131 }
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	132
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	133 foreach my $name ('pass') {
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	134 system("openssl genrsa -out $d/$name.key -passout pass:pass "
1488 dbce8fb5f5f8 Tests: align with OpenSSL security level 2. Sergey Kandaurov <pluknet@nginx.com> parents: 1445 diff changeset	135 . "-aes128 2048 >>$d/openssl.out 2>&1") == 0
1443 7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	136 or die "Can't create $name key: $!\n";
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	137 system("openssl req -x509 -new -config $d/openssl.conf "
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	138 . "-subj /CN=$name/ -out $d/$name.crt -key $d/$name.key "
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	139 . "-passin pass:pass >>$d/openssl.out 2>&1") == 0
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	140 or die "Can't create $name certificate: $!\n";
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	141 }
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	142
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	143 $t->write_file('password_file', 'pass');
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	144 $t->write_file('index.html', '');
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	145
1535 144c6ce732e4 Tests: removed TODO and try_run() checks for legacy versions. Sergey Kandaurov <pluknet@nginx.com> parents: 1488 diff changeset	146 $t->run()->plan(7);
1443 7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	147
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	148 ###############################################################################
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	149
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	150 like(cert('default', 8080), qr/CN=one/, 'default certificate');
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	151 like(get('default', 8080), qr/default/, 'default context');
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	152
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	153 like(get('password', 8083), qr/password/, 'ssl_password_file');
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	154
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	155 # session reuse
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	156
1618 cea0591b13dd Tests: fixed TLSv1.3 session reuse in stream_ssl_certificate.t. Sergey Kandaurov <pluknet@nginx.com> parents: 1609 diff changeset	157 my ($s, $ssl) = get('default', 8080);
1443 7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	158 my $ses = Net::SSLeay::get_session($ssl);
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	159
1620 166461f0bd4b Tests: added $ssl_server_name checks to stream_ssl_certificate.t. Sergey Kandaurov <pluknet@nginx.com> parents: 1619 diff changeset	160 like(get('default', 8080, $ses), qr/default:r/, 'session reused');
1851 0351dee227a8 Tests: unbreak tests with dynamic certificates on stable. Sergey Kandaurov <pluknet@nginx.com> parents: 1836 diff changeset	161
0351dee227a8 Tests: unbreak tests with dynamic certificates on stable. Sergey Kandaurov <pluknet@nginx.com> parents: 1836 diff changeset	162 TODO: {
0351dee227a8 Tests: unbreak tests with dynamic certificates on stable. Sergey Kandaurov <pluknet@nginx.com> parents: 1836 diff changeset	163 # ticket key name mismatch prevents session resumption
0351dee227a8 Tests: unbreak tests with dynamic certificates on stable. Sergey Kandaurov <pluknet@nginx.com> parents: 1836 diff changeset	164 local $TODO = 'not yet' unless $t->has_version('1.23.2');
0351dee227a8 Tests: unbreak tests with dynamic certificates on stable. Sergey Kandaurov <pluknet@nginx.com> parents: 1836 diff changeset	165
1620 166461f0bd4b Tests: added $ssl_server_name checks to stream_ssl_certificate.t. Sergey Kandaurov <pluknet@nginx.com> parents: 1619 diff changeset	166 like(get('default', 8081, $ses), qr/default:r/, 'session id context match');
1851 0351dee227a8 Tests: unbreak tests with dynamic certificates on stable. Sergey Kandaurov <pluknet@nginx.com> parents: 1836 diff changeset	167
0351dee227a8 Tests: unbreak tests with dynamic certificates on stable. Sergey Kandaurov <pluknet@nginx.com> parents: 1836 diff changeset	168 }
0351dee227a8 Tests: unbreak tests with dynamic certificates on stable. Sergey Kandaurov <pluknet@nginx.com> parents: 1836 diff changeset	169
1620 166461f0bd4b Tests: added $ssl_server_name checks to stream_ssl_certificate.t. Sergey Kandaurov <pluknet@nginx.com> parents: 1619 diff changeset	170 like(get('default', 8082, $ses), qr/default:\./, 'session id context distinct');
1443 7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	171
1445 889283abadf8 Tests: added basic ssl tests with dynamic certificate not found. Sergey Kandaurov <pluknet@nginx.com> parents: 1443 diff changeset	172 # errors
889283abadf8 Tests: added basic ssl tests with dynamic certificate not found. Sergey Kandaurov <pluknet@nginx.com> parents: 1443 diff changeset	173
889283abadf8 Tests: added basic ssl tests with dynamic certificate not found. Sergey Kandaurov <pluknet@nginx.com> parents: 1443 diff changeset	174 Net::SSLeay::ERR_clear_error();
889283abadf8 Tests: added basic ssl tests with dynamic certificate not found. Sergey Kandaurov <pluknet@nginx.com> parents: 1443 diff changeset	175 get_ssl_socket('nx', 8084);
889283abadf8 Tests: added basic ssl tests with dynamic certificate not found. Sergey Kandaurov <pluknet@nginx.com> parents: 1443 diff changeset	176 ok(Net::SSLeay::ERR_peek_error(), 'no certificate');
889283abadf8 Tests: added basic ssl tests with dynamic certificate not found. Sergey Kandaurov <pluknet@nginx.com> parents: 1443 diff changeset	177
1443 7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	178 ###############################################################################
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	179
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	180 sub get {
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	181 my ($host, $port, $ctx) = @_;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	182 my ($s, $ssl) = get_ssl_socket($host, $port, $ctx) or return;
1637 da52525f49d1 Tests: avoid ssl_certificate.t hang on SIGPIPE. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	183
da52525f49d1 Tests: avoid ssl_certificate.t hang on SIGPIPE. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	184 local $SIG{PIPE} = 'IGNORE';
da52525f49d1 Tests: avoid ssl_certificate.t hang on SIGPIPE. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	185
1443 7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	186 my $r = Net::SSLeay::read($ssl);
1619 436d0ffc2ea3 Tests: correctly shutdown ssl for reproducible session reuse tests. Sergey Kandaurov <pluknet@nginx.com> parents: 1618 diff changeset	187 Net::SSLeay::shutdown($ssl);
1443 7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	188 $s->close();
1618 cea0591b13dd Tests: fixed TLSv1.3 session reuse in stream_ssl_certificate.t. Sergey Kandaurov <pluknet@nginx.com> parents: 1609 diff changeset	189 return $r unless wantarray();
cea0591b13dd Tests: fixed TLSv1.3 session reuse in stream_ssl_certificate.t. Sergey Kandaurov <pluknet@nginx.com> parents: 1609 diff changeset	190 return ($s, $ssl);
1443 7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	191 }
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	192
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	193 sub cert {
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	194 my ($host, $port, $ctx) = @_;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	195 my ($s, $ssl) = get_ssl_socket($host, $port, $ctx) or return;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	196 Net::SSLeay::dump_peer_certificate($ssl);
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	197 }
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	198
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	199 sub get_ssl_socket {
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	200 my ($host, $port, $ses) = @_;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	201
1621 fd440d324700 Tests: simplified get_ssl_socket() functions that use Net::SSLeay. Sergey Kandaurov <pluknet@nginx.com> parents: 1620 diff changeset	202 my $s = IO::Socket::INET->new('127.0.0.1:' . port($port));
1443 7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	203 my $ctx = Net::SSLeay::CTX_new() or die("Failed to create SSL_CTX $!");
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	204 my $ssl = Net::SSLeay::new($ctx) or die("Failed to create SSL $!");
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	205 Net::SSLeay::set_tlsext_host_name($ssl, $host);
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	206 Net::SSLeay::set_session($ssl, $ses) if defined $ses;
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	207 Net::SSLeay::set_fd($ssl, fileno($s));
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	208 Net::SSLeay::connect($ssl) or die("ssl connect");
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	209 return ($s, $ssl);
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	210 }
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	211
7c217d343d1e Tests: ssl tests with dynamic certificates. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	212 ###############################################################################

Mercurial > hg > nginx-tests

annotate stream_ssl_certificate.t @ 1860:58951cf933e1